Privacy Policy
Last updated: 17 August 2026
This Privacy Policy explains how House Me Up ("we", "us") collects and processes your personal data when you visit housemeup.com or buy from us, in line with the EU General Data Protection Regulation (GDPR) and Greek Law 4624/2019.
1. Who is responsible (Data Controller)
- We are House Me Up.
- Contact for privacy questions: [email protected]
2. What we collect and why
- Order data (name, email, shipping address, order details) — to fulfil your purchase. Legal basis: performance of a contract.
- Payment data — card details are entered directly with our payment provider (Stripe); we never see or store your full card number. Legal basis: contract.
- Contact data — if you email us, we process your message and email address to reply. Legal basis: legitimate interest.
- Consent & preferences — your cookie choice is stored locally in your browser. Legal basis: consent.
- Technical data — standard server/security logs (e.g., IP address) kept by our host for security and abuse prevention. Legal basis: legitimate interest.
3. Cookies and embedded content
- Essential: a small local storage entry that remembers your cookie choice and your shopping cart. These do not require consent.
- YouTube (consent-based): videos and thumbnails load from YouTube (via youtube-nocookie.com) only after you click "Accept". If you decline, no YouTube content or cookies are loaded.
You can change or withdraw your choice at any time using the "Cookie settings" link in the site footer.
4. Who we share data with (processors)
We use trusted providers who process data on our behalf under GDPR-compliant data processing agreements:
- Stripe — payment processing and checkout.
- Cloudflare — website hosting, CDN, and security.
- Google / YouTube — embedded videos and thumbnails (only after consent).
- Shipping & fulfilment partners — to produce and deliver your order.
- Google (Gmail) — our contact email.
5. International transfers
Some of these providers are based outside the EU/EEA (e.g., the USA). Where data is transferred, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and/or the EU–US Data Privacy Framework.
6. How long we keep it
- Order and transaction records: kept for as long as required by applicable law, then deleted.
- Support emails: kept until the matter is resolved and for a reasonable period afterwards.
- Cookie/cart preferences: stored in your browser until you clear them.
7. Your rights
You have the right to access, correct, delete, restrict, or object to the processing of your data, and to data portability. To exercise any right, email [email protected]; we will respond within one month.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.
8. Security
The site is served over HTTPS with security headers. We never store card data. We take reasonable technical and organisational measures to protect your information.
9. Changes
We may update this policy; the "last updated" date above will change accordingly.

